Privacy Policy | Brass-SEO

1. Data Controller

Copper Sun Content and Creative, LLC is the data controller responsible for your personal data collected through Brass-SEO. For privacy inquiries, contact us at .

2. Information We Collect

We collect information you provide directly, including:

Account information (email address)
Payment information (processed securely by LemonSqueezy)
Google account data you authorize us to access

3. Google Data Access

When you connect your Google accounts, we access:

Google Search Console: Search queries, impressions, clicks, and positions
Google Analytics 4: Page views, traffic sources, and user metrics

This access is read-only. We never modify your Google data. You can revoke access at any time through your Google account settings.

4. How We Use Your Data

We use your data to:

Provide SEO analysis and recommendations
Generate reports and insights
Power the AI chat assistant with context about your site
Process payments and manage your subscription
Send service-related communications

5. AI Processing

Our chat interface is powered by artificial intelligence. When you use the chat feature:

Your questions and prompts are processed by third-party AI services
Summary SEO metrics from your connected Google accounts may be shared with AI providers to generate responses
Page URLs and titles from your properties may be included for context

No AI Training: We do not use your data to train AI models. Your SEO data and chat conversations are used solely to provide you with analysis and recommendations.

Chat History: Your chat conversations are stored to provide continuity across sessions. Chat history is automatically deleted after 30 days. All chat data is also deleted when you delete your account.

Legal Basis (GDPR): Our primary legal basis for AI processing is contract performance (Article 6(1)(b)) to provide the SEO analysis service you have subscribed to. See our Terms of Service for complete details on all legal bases for data processing.

6. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use:

Secure cloud infrastructure for authentication and data storage
Industry-standard hosting with SSL encryption
PCI-compliant payment processing
AI services for analysis (data processed per provider privacy policies)

7. International Data Transfers

Brass-SEO is operated from the United States. If you are located outside the United States, please be aware that your data will be transferred to and processed in the United States, where our servers and third-party service providers are located.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission
Service providers who maintain appropriate safeguards for international transfers

By using Brass-SEO, you consent to the transfer of your data to the United States and other countries where our service providers operate.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

9. Third-Party Services

We use the following third-party services:

Google OAuth for authentication
Payment processing services for subscription billing
AI services for SEO analysis
X (Twitter) Ads for conversion tracking (non-EU visitors only)

10. Your Rights

Under GDPR (EEA/UK/Switzerland) and CCPA (California), you have the following rights:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data ("right to be forgotten")
Data Portability: Request your data in a machine-readable format
Objection: Object to processing based on legitimate interest
Restriction: Request restricted processing in certain circumstances
Withdraw Consent: Withdraw previously given consent at any time
Revoke Access: Disconnect your Google accounts at any time

To exercise any of these rights, contact us at . We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your request appropriately.

11. Cookies

We use the following types of cookies:

Essential cookies: Required for authentication and session management. These cookies are necessary for the service to function and cannot be disabled.
Analytics cookies (non-EU visitors only): We use Google Analytics to understand how visitors use our website. Google Analytics sets cookies (such as _ga) to collect anonymous usage data. Important: Google Analytics is not loaded for visitors in the European Union, European Economic Area, United Kingdom, or Switzerland. We determine your location based on your IP address. If you are visiting from these regions, no analytics cookies are set on your device. For visitors outside these regions, you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Privacy-friendly analytics (all visitors): We use Vercel Analytics, which does not use cookies or collect personal data. This service provides anonymous, aggregated website statistics and is compliant with GDPR without requiring consent.
Advertising pixel (non-EU visitors only): We use the X (Twitter) Ads pixel to measure the effectiveness of our advertising campaigns. Like Google Analytics, this pixel is not loaded for visitors in the European Union, European Economic Area, United Kingdom, or Switzerland. For visitors outside these regions, the X pixel may set cookies to track conversions. We also send limited server-side conversion data (hashed email) to X when a user starts a subscription, to measure ad campaign performance.

We do not sell your data to third parties. You can control cookie preferences through your browser settings, but disabling essential cookies may prevent you from using the service.

12. Children's Privacy

Brass-SEO is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at and we will delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

14. Contact

For privacy-related questions, contact us at

Copper Sun Content and Creative, LLC